mobilepay.fi

HTML metadata

Title: MobilePaylla raha liikkuu helpon helposti | MobilePay
Description: MobilePaylla voit lähettää rahaa helposti ja turvallisesti kavereillesi sekä maksaa yli 53 000 yritykselle niin paikan päällä kuin verkossa
Language: fi-FI

Open Graph

title: MobilePaylla raha liikkuu helpon helposti
description: MobilePaylla voit lähettää rahaa helposti ja turvallisesti kavereillesi sekä maksaa yli 53 000 yritykselle niin paikan päällä kuin verkossa

Technology

CDN: Azure Front Door
CMS: Next.js

Cookie consent

Cookiebot

Third-party hosts loaded (3)

cdn.sanity.io×17
consent.cookiebot.com×1
vippsmobilepay.boost.ai×1

Social

Registration

Created

2013-03-20

Name servers

ns3-36.azure-dns.org [ok]
ns2-36.azure-dns.net [ok]
ns4-36.azure-dns.info [ok]
ns1-36.azure-dns.com [ok]

DNS records live

NS

ns1-36.azure-dns.com
ns2-36.azure-dns.net
ns3-36.azure-dns.org
ns4-36.azure-dns.info

MX

0 mobilepay-fi.mail.protection.outlook.com

TXT

Show 5 TXT records

aobd3a1fg4gl2vjn8s503qn9q0
0q+zAuZI8he2e1AeQi44rdF8qgdPgnFhGFrGWiOBi0E=
HAnCeSplZ5YnsfM2N0RP52EOI5OPM4f1C6HujSIAxLkTRzZYYyLN0siXK+/y4QlSM3sDpZiuqvysz8TrRHh+Yg==
25j4d0oscmi0st6nffco3pqlsd
mkHl//C08zOhklI7MtZvRPjrny3yM3o1ZlR0AUsb6iM=

Verified for

GlobalSign
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.logicalware.com include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=none; rua=mailto:dmarcreporting@mobilepay.fi; ruf=mailto:dmarcforensics@mobilepay.fi; pct=100

policy: reject (enforced) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnffEwE5QUP6Z+4Ae4P1sM5HgaIo/91NHogvRODsLl1Q0q3GvnKGDHNcgcLKQuvAQ+KQoEZsPlpdnnT…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uceQXQL2Vn1KA4yLwiaSrNiNNwFLBq1TuDhr1dMvOuF3OqMTFJqCCKOXlGOlDVMTXrcKpSAYEdAxD…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-12-19 to 2026-06-20

Expires in 19 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://mobilepay.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://vippsmobilepay.boost.ai https://vippsmobilepaytest.boost.ai https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google.com https://www.gstatic.com https://vipps.no https://www.vipps.no https://vipps.se https://www.vipps.se https://mobilepay.dk https://www.mobilepay.dk https://mobilepay.fi https://www.mobilepay.fi; connect-src 'self' https://vippsmobilepay.boost.ai https://vippsmobilepaytest.boost.ai https://consent.cookiebot.com https://consentcdn.cookiebot.com https://zai55r7s.api.sanity.io wss://zai55r7s.api.sanity.io https://api-eu.mixpanel.com https://www.google.com https://test.salesforce.com https://webto.salesforce.com https://vipps--uat.sandbox.my.salesforce.com; style-src 'self' 'unsafe-inline' https://vipps.no https://www.vipps.no https://vipps.se https://www.vipps.se https://mobilepay.dk https://www.mobilepay.dk https://mobilepay.fi https://www.mobilepay.fi; img-src 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload